Data protection statement

1.1 We are delighted that you visit our website and thank you for your interest. The following contains information on how we handle your personal data when you use our website. Personal data means all data with which you can be identified personally.

1.2 The controller of data processing on this website as defined in the General Data Protection Regulation (GDPR) is "BORA Vertriebs GmbH & Co KG, Innstraße 1, 6342 Niederndorf, +435373622500, mail(at)bora.com". The controller for processing personal data is the natural person or legal entity who alone or together with others decides the purposes and methods of processing personal data.

1.3 The controller has appointed a Data Protection Officer for this website, who can be reached at: "Bernhard Johne, Innstraße 1, 1.6342 Niederndorf, +498035907168, dataprotection(at)bora.com"

1.4 For security reasons and to protect the transfer of personal data and other confidential content (e.g. orders or requests sent to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection from the character string “https://” and the padlock symbol in your browser toolbar.

2) Data capture when visiting our website

If you visit our website for information purposes only, i.e. if you do not register with us or share information with us in any other way, we collect only the personal data that your browser transfers to our server (“server log files”). If you access our website, we collect the following data, which is a technical requirement for us to be able to display the website to you:

The website visited

Date and time at the moment of access

Amount of data sent in bytes

Source/reference, from where you accessed the page

Browser used

Operating system used

IP address used (if required: anonymised)

The processing is carried out pursuant to point (f) of Article 6(1) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is neither shared nor used in any other way. However, we reserve the right to check the server log files subsequently, should there be solid grounds to indicate unlawful use.

3) Cookies

To make our website attractive to visit and to enable the use of certain functions, we use cookies on various web pages. These are small text files, which are placed on your end-device. Some of the cookies we use are deleted after the end of the browser session, i.e. once your browser has closed (session cookies). Other cookies remain on your end-device and enable us or our partner companies (third-party provider cookies) to recognise your browser again on your next visit (persistent cookies). If cookies are placed, they collect and process individually certain user information, such as browser and site data, as well as IP address values. Persistent cookies are deleted automatically after a preset period, which can differ depending on the cookie.

Provided that personal data is also processed through individual cookies implemented by us, the processing is carried out pursuant to point (f) of Article 6(1) GDPR to safeguard our legitimate interests with regard to the best possible functionality of the website and a customer-friendly and effective arrangement of the website visit.

Under certain circumstances, we work with advertising partners, who help us to make our online service more interesting for you. For this purpose, cookies from partner companies are also stored on your hard disk when you visit our website (third-party cookies). If we work with the aforesaid advertising partners, you are individually and separately informed of the implementation of this type of cookie and the scope of the information collected within the paragraphs below.

Please note that you can set your browser to notify you of the placement of cookies and decide whether to accept them individually or opt out from accepting cookies in certain instances or generally. Each browser is different in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. These instructions can be found for each browser concerned at the following links:

Please note that non-acceptance of cookies can restrict the functionality of our website.

4) Making contact

When you contact us (e.g. through a contact form or email) personal data is collected. It is apparent from the particular contact form which data is collected. This data is stored and used exclusively for the purpose of responding to your request or contact and the associated technical administration. The legal basis for the processing of data is our legitimate interest in responding to your request pursuant to point (f) of Article 6(1) GDPR. If you are contacting us to terminate a contract, the additional legal basis for the processing is pursuant to point (b) of Article 6(1) GDPR. Your data is deleted once your request has been processed, if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no statutory data retention obligations.

5) Use of your data for direct marketing

5.1 Registration for our newsletter

If you register for our email newsletter, we regularly send you information about our offers. The only obligatory information for receiving the newsletter is your email address. Any other data is given on a voluntary basis and is used so that we can address you personally. To send the newsletter, we use the double opt-in process. This means that we only send you an email newsletter if you have expressly confirmed that you consent to the newsletter being sent to you. Next we send you a confirmation email in which you are asked to click on an appropriate link to confirm that you want to receive newsletters in the future.

With the activation of the confirmation link, you grant us your consent for the use of your personal data pursuant to point (a) of Article 6(1) GDPR. When you register for the newsletter, we store your IP address registered by the Internet service provider (ISP), as well as the date and time of registration to be able to to trace a possible misuse of your email address at a later point in time. The data we collect when you register for the newsletter is used exclusively for the purpose of marketing approaches through the channel of the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to this effect to the controller mentioned at the beginning. Once you have unsubscribed successfully, your email address is erased from our newsletter distribution list without undue delay, provided that you have not expressly consented to further use of your data or we reserve the right to use data beyond this time, which is legally permitted and about which we inform you in this statement.

5.2 Marketing by letter post

On the basis of our legitimate interest in personalised direct marketing, we reserve the right to store your first name and surname, your postal address and - insofar as we have received this additional information from you as part of the contractual relationship - your title, academic qualifications, year of birth and your professional, sector or company name pursuant to point (f) of Article 6(1) GDPR and to use them to send interesting offers and information on our products by letter post.

You can opt out of the storage and use of your data for this purpose at any time by sending a message to this effect to the controller.

6) Use of social media: Social plugins

6.1 Facebook plugins with Shariff solution

Our website uses social plugins ("plugins") of the Facebook social network, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, US ("Facebook").

To enhance the protection of your data when you visit our website, these buttons are not unrestricted as plugins but are only integrated using an HTML link in the page. This type of integration guarantees that when a page of our website that contains such buttons is accessed, there is no connection made with Facebook’s servers. If you click on the button, a new browser window opens and calls up the Facebook page where you can interact with the plugins (after entering your login data, if required).

Headquartered in the US, Facebook Inc. has Privacy Shield certification; Privacy Shield being the EU-US framework for data protection, which guarantees compliance with the applicable EU data protection level.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights and settings options concerning the protection of your privacy can be obtained from Facebook’s data protection information: http://www.facebook.com/policy.php

In order to increase the safety of your data when visiting our website, these buttons are not embedded into the web page without restrictions as plug-ins, but only by using an HTML link. This way of embedding ensures that when opening one of our web pages containing this type of buttons, no connection is established with Pinterest servers just yet. Clicking the button opens a new browser window and the Pinterest web page, where you can interact with its plug-ins (after entering your login data if necessary).

To find out more about the purpose and scope of data collection, and further processing and use of the data by Pinterest as well as your rights and possible settings for the protection of your privacy, please see the Pinterest privacy policy: https://about.pinterest.com/de/privacy-policy

To enhance the protection of your data when you visit our website, these buttons are not unrestricted as plugins but are only integrated using an HTML link in the page. This type of integration guarantees that when a page of our website that contains such buttons is accessed, there is no connection made with Twitter’s servers. If you click on the button, a new browser window opens and calls up the Twitter page, where you can interact with the plugins (after entering your login data, if required).

Headquartered in the US, Twitter Inc. has Privacy Shield certification; Privacy Shield being the EU-US framework for data protection, which guarantees compliance with the applicable EU data protection level.

The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your rights and settings options concerning the protection of your privacy can be obtained from Twitter’s data protection information: https://twitter.com/en/privacy

7) Use of social media: Videos

Use of YouTube videos

This website uses the YouTube embedding function to show and play back videos of the provider, “YouTube”, which belongs to Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (“Google”).

The privacy-enhanced mode is used, which, according to the provider’s information, activates the storage of user information only when the video/videos is/are played back. If the playback of an embedded YouTube video is started, the provider, “YouTube”, implements cookies to gather information on user behaviour. According to information from “YouTube”, these serve, amongst other things, to capture video statistics, which improve user-friendliness and prevent abusive practices. If you are logged into Google, your data is associated directly with your account if you click on a video. If you do not want the association to be made with your YouTube profile, you must log out before activating the button. Google saves your data (even for users who are not logged in) as a user profile and analyses it. Such an analysis is carried out, in particular, pursuant to point (f) of Article 6(1) GDPR on the basis of the legitimate interests of Google in the insertion of personalised advertising, market research and/or the needs-based design of our website. You have a right to object to the creation of this user profile, which you must exercise by contacting YouTube.

A connection is made to the Google network “DoubleClick” every time this website is accessed, regardless of whether embedded videos are played back, which can trigger further data-processing events over which we have no influence.

Headquartered in the US, Google LLC has Privacy Shield certification; Privacy Shield being the EU-US framework for data protection, which guarantees compliance with the applicable EU data protection level.

This website uses the online advertising program "Google AdWords" and, as part of Google AdWords, the conversion tracking of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (“Google”). We use the offer of Google AdWords to draw attention to our attractive offers on external websites with the help of advertising measures (Google AdWords). We can ascertain how successful individual advertising measures are in relation to the data of the advertising campaigns. We pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

The conversion tracking cookie is placed when a user clicks on an AdWords advert switched on by Google. Cookies are small text files, which are placed on your computer system. These cookies usually lose their validity after 30 days and do not serve for personal identification. If the user visits certain pages on this website and the cookie is still running, Google and we can recognise that the user has clicked on the advert and was forwarded to this page. Every Google AdWords customer receives a different cookie. So cookies cannot be followed via the websites of other AdWords users. The information retrieved with the help of the conversion cookie serves to produce conversion statistics for AdWords customers who have decided to use conversion tracking. Customers learn the total number of users who have clicked on their advert and have been forwarded to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to take part in tracking, you can block this use, by deactivating the Google conversion tracking cookie via your web browser in user settings. You will then not be recorded in the conversion tracking statistics. We implement Google AdWords on the basis of our legitimate interest in targeted marketing pursuant to point (f) of Article 6(1) GDPR.

Headquartered in the US, Google LLC has Privacy Shield certification; Privacy Shield being the EU-US framework for data protection, which guarantees compliance with the applicable EU data protection level.

You can permanently deactivate cookies for advertising preferences by preventing them through the appropriate setting in your browser software or by downloading and installing the available browser plugin at the following link:http://www.google.com/settings/ads/plugin?hl=de

Please note that it is possible that certain functions of this website may not be able to be used or will only be able to be used to a limited degree, if you have deactivated the use of cookies.

9) Web analysis services

9.1 Google (Universal) Analytics

- Google Analytics

This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, US ("Google"). Google Analytics uses cookies, which are text files that are stored on your computer and which enable an analysis of the use of the website to be made. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transferred to a Google server in the US and stored there.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures the anonymisation of the IP address by shortening it, and excludes a direct link to persons. Through the extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. In these exceptional cases, this processing is carried out pursuant to point (f) of Article 6(1) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.On our behalf, Google will use this information to analyse your use of the website, to compile reports on website activities and to provide us with other services related to the use of the website and the internet. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by selecting the appropriate setting in your browser software; however, we would point out that in this event you may not be able to use all the functions of this website should the occasion arise. Moreover, you can prevent the capture of the data generated by the cookie and obtained by your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link:https://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to place an opt-out cookie, which prevents future data capture by Google Analytics within this website (this opt-out cookie works only in your browser and only for this domain – if you delete your cookies in this browser, you need to click on this link again)

On this website, data is collected and stored using the web analytics software Matomo (www.matomo.org), a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”) based on our legitimate interest in statistical analysis of user behaviour for optimisation and marketing purposes pursuant to Art. 6(1F) GDPR. For the same purposes, this data may be used to create and analyse pseudonymised user profiles. Cookies may be also be used to this end. Cookies are small data files that are saved locally in the cache of the website visitor’s internet browser. They are used to identify browsers that return to the website. Data collected using Matomo technology (including your pseudonymised IP address) is processed on our servers. The information generated by the cookie in the pseudonymised user profiles will not be used to personally identify visitors to this website or merged with the personal data about the bearer of the pseudonym. If you do not consent to the storage and analysis of this data from your visit to our website, you may object to the storage and use below at any time with a simple mouse click. In this case your browser will store an opt-out cookie, which means that Matomo will not collect any session data. Please note that by deleting all of your cookies, you will also delete the opt-out cookie and will have to reactive it again, where necessary.

10) Retargeting/ remarketing/ recommendation advertising

Google AdWords Remarketing

Our website uses the functions of Google AdWords Remarketing, with which we advertise for this website in Google search results, as well as third-party websites. The provider is Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (“Google”). To this end, Google places a cookie in the browser of your end-device, which enables interest-based advertising automatically by means of a pseudonymous cookie ID and based on web pages you visit. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website pursuant to point (f) of Article 6(1) GDPR.

Data processing extending beyond this takes place only provided that you have agreed with Google that your web and app browser history is linked to Google with your Google account and information from your Google account is used to personalise adverts that you look at online. In this instance, if you are logged into Google when you visit our website, Google uses your data together with Google Analytics data to generate and define target group lists for remarketing across all devices. Your personal data is temporary linked by Google with Google Analytics data to create target groups.

Alternatively, you can obtain information from the Digital Advertising Alliance at www.aboutads.info about the placement of cookies and adjust your settings accordingly. Finally, you can set your browser to notify you of the placement of cookies and decide whether to accept them individually or opt out from accepting cookies in certain instances or generally. Non-acceptance of cookies can restrict the functionality of our website.

Headquartered in the US, Google LLC has Privacy Shield certification; Privacy Shield being the EU-US framework for data protection, which guarantees compliance with the applicable EU data protection level.

Our website uses Google Maps (API) by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (“Google”). Google Maps is a web service for displaying interactive (country) maps to display geographic information visually. We use this service to display our site to you and to make it easier for you to get to us.

When you access the subsites where the Google Maps map is integrated, information about your use of our website (e.g. your IP address) is transferred to Google servers in the US and stored there. This happens regardless of whether Google provides a user account which you are logged into or whether there is no user account. If you are logged into Google, your data is assigned directly to your account. If you do not want the assignment to be made to your Google profile, you must log out before activating the button. Google saves your data (even for users who are not logged in) as a user profile and analyses it. Such an analysis is carried out, in particular, pursuant to point (f) of Article 6(1) GDPR on the basis of the legitimate interests of Google in the insertion of personalised advertising, market research and/or the needs-based design of our website. You have a right to object to the creation of this user profile, which you have to exercise by contacting YouTube.

Headquartered in the US, Google LLC has Privacy Shield certification; Privacy Shield being the EU-US framework for data protection, which guarantees compliance with the applicable EU data protection level.

If you do not agree to the future transmission of your data to Google as part of using Google Maps, there is also the option of deactivating the Google Maps web service completely by turning off JavaScript in your browser. Google Maps and the map displays on our website can then not be used.

This website uses web fonts for the detailed display of fonts, which are provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (“Google”). When you access a web page, your browser loads the necessary web fonts in your browser cache to display text and fonts correctly.

To this end, the browser you use must be linked to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. Google web fonts are used in the interest of presenting our online offers in a uniform and attractive way. This represents a legitimate interest within the meaning of point (f) of Article 6(1) GDPR. If your browser does not support web fonts, a standard font is used on your computer.Headquartered in the US, Google LLC has Privacy Shield certification; Privacy Shield being the EU-US framework for data protection, which guarantees compliance with the applicable EU data protection level.

12.1 The applicable data protection regulation gives you rights in relation to the controller with regard to the processing of your personal data (access and intervention rights). The information below explains these rights:

Right of access pursuant to Article 15 GDPR: In particular, you have the right to information about the personal data we process that concerns you, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data or to object to such processing, the right to lodge a complaint with a supervisory authority, where the personal data is not collected from the data subject, any available information as to its source, the existence of automated decision-making, including profiling, and, as required, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject, as well as the notification obligation regarding rectification or erasure of personal data or restriction of processing information, which guarantees exist with regard to the sharing of your data with third countries pursuant to Article 46 GDPR;

Right to rectification pursuant to Article 16 GDPR: You have a right to obtain from us without undue delay the rectification and/or completion of inaccurate personal data that concerns you;

Right to erasure pursuant to Article 17 GDPR: You have the right to have your personal data erased subject to the conditions of Article 17(1) GDPR. However, this right does not apply, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, on grounds of public interest or for the establishment, exercise or defence of legal claims;

Right to restriction of processing pursuant to Article 18 GDPR: You have the right to the restriction of processing of your personal data, so long as the accuracy of the personal data contested by you is checked, if you oppose the erasure of the personal data due to improper data processing and request the restriction of its use instead; if you need your data for the establishment, exercise or defence of legal claims, since we no longer need this data for the purposes of the processing or if you objected to processing for reasons of your special situation, pending verification of whether the legitimate grounds of the controller override those of the data subject;

Notification obligation regarding rectification or erasure of personal data or restriction of processing pursuant to Article 19 GDPR: If you have asserted your right to obtain rectification, erasure or restriction of your personal data from the controller, the controller is obliged to notify all the recipients to whom the personal data affected was disclosed of this rectification or erasure of the data or the restriction of the processing, unless this proves impossible or involves disproportionate effort. You have the right to be notified of these recipients.

Right to data portability pursuant to Article 20 GDPR: You have the right to receive the personal data that concerns you, which you have provided to us, in a structured, commonly used and machine-readable format, and have the right to transmit this data to another controller, where technically feasible.

Right to withdraw consent pursuant to Article 7(3) GDPR: You have the right to withdraw consent for processing data at any time with future effect. In the event of withdrawal, we will erase the relevant data with undue delay, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent up until the point of withdrawal;

Right to lodge a complaint pursuant to Article 77 GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have, without prejudice to any other administrative or judicial remedy, the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

12.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A CONSIDERATION OF INTERESTS ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF PERSONAL DATA THAT CONCERNS YOU WITH FUTURE EFFECT.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE TO PROCESS THE PERSONAL DATA IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF THE PERSONAL DATA CONCERNED FOR THE PURPOSE OF THIS SORT OF ADVERTISING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13) Duration of storage of personal data

The duration of storage of personal data is measured according to the particular statutory retention period (e.g. retention periods concerning tax and commercial law). Once the period has expired, the data concerned is erased as a matter of routine, provided that it is no longer required for the fulfilment or development of a contract and/or there no longer remains a legitimate interest for further retention on our part.